$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/uYsLFr8JiYs6Gwtf1YNSMAaF8TU.roa File: uYsLFr8JiYs6Gwtf1YNSMAaF8TU.roa (raw, json) Hash identifier: E4nC1OYjnI/jCE9KW2dB2icViAdgbSQ/5F/k0R/CLCA= Subject key identifier: B9:8B:0B:16:BF:09:89:8B:3A:1B:0B:5F:D5:83:52:30:06:85:F1:35 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1178 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/uYsLFr8JiYs6Gwtf1YNSMAaF8TU.roa Signing time: Mon 26 Aug 2024 05:17:33 +0000 ROA not before: Mon 26 Aug 2024 05:17:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9505 IP address blocks: 2001:b200::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4472 (0x1178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Aug 26 05:17:33 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B98B0B16BF09898B3A1B0B5FD58352300685F135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:05:aa:ff:fe:f4:43:ae:3c:67:88:c1:94: 99:5c:2d:79:aa:14:7e:d7:f6:24:d7:9b:7c:fe:e3: 8e:0d:12:ba:4a:23:69:4b:b6:42:f2:97:8b:d1:5f: c7:1f:97:05:06:4d:a8:2b:12:65:9d:44:0a:b6:e4: 56:8a:ec:be:14:18:74:94:0a:ba:8b:b4:96:4e:57: 3c:ec:14:3d:aa:e3:a9:e8:80:ee:6e:df:ff:7e:f3: d0:ca:a6:48:be:f9:e0:3a:de:8e:1f:e7:33:8e:72: 0a:b6:3c:34:fc:1f:f7:30:45:39:d3:1f:c5:20:b8: 17:71:26:49:fc:9d:94:d0:f3:f5:9b:b0:e9:e6:50: 59:54:55:ef:82:6c:4b:68:d9:b9:96:ed:ea:f5:16: 0a:22:6f:93:c3:7e:4f:70:86:3e:8f:23:3c:f1:85: 0f:4c:6f:c4:67:74:5d:5d:e6:cc:48:24:98:01:03: 20:b4:77:39:15:96:22:3a:2c:38:91:2a:82:5f:80: b5:7a:b0:e4:6f:a5:f3:9e:84:5a:e4:89:b2:82:72: 17:1e:a7:83:f7:e4:00:7e:5c:26:ce:e6:06:ea:75: c8:5c:c9:39:21:33:dc:41:83:3b:d5:c0:df:ea:e5: aa:75:0b:07:27:fa:63:67:37:96:4d:38:a2:ec:95: 6f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8B:0B:16:BF:09:89:8B:3A:1B:0B:5F:D5:83:52:30:06:85:F1:35 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/uYsLFr8JiYs6Gwtf1YNSMAaF8TU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b200::/32 Signature Algorithm: sha256WithRSAEncryption 46:5b:7e:e1:9f:7c:79:46:85:af:fe:e8:ef:c4:1d:63:06:67: 11:71:c9:96:90:b8:03:46:37:79:6e:3a:e8:a1:47:af:35:56: 2f:c3:94:60:fa:88:60:3e:11:08:a7:7b:a9:22:8a:c8:9e:b3: 5c:f3:06:7e:52:fc:b5:52:df:80:57:95:1a:73:3b:49:d8:19: d6:90:1b:fb:d6:1e:b5:5b:2f:3e:64:16:d2:e5:e4:0e:63:02: 64:67:67:c6:21:95:e6:2f:ec:29:51:b2:9a:e5:54:b3:f3:9f: f0:c2:a4:7e:31:b1:3f:c0:1c:06:0e:b2:36:02:af:b3:0b:05: 2a:5f:ee:4d:99:02:3b:d9:da:e3:f0:5b:f5:6c:81:be:10:ff: 24:90:11:bd:b5:2c:70:2a:27:6a:db:6c:96:f0:7a:f3:7c:48: 13:71:08:26:3e:4f:36:e6:ee:bb:c2:30:9f:6d:cf:04:f0:ec: dd:78:93:56:bd:b4:d8:17:bf:e5:2d:b2:78:cc:c0:8d:67:44: af:c0:4a:a0:14:91:29:8d:ba:df:2a:30:79:85:2f:59:f4:96: ff:f5:73:6c:cc:0d:f2:3c:42:54:87:61:23:9c:45:27:57:be: 6a:c1:d0:8e:5c:cd:9e:22:e8:89:d4:9d:ef:69:81:07:ba:63: 5e:ea:6e:9d -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICEXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw NTE3MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI5OEIwQjE2QkYwOTg5 OEIzQTFCMEI1RkQ1ODM1MjMwMDY4NUYxMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/CQWq//70Q648Z4jBlJlcLXmqFH7X9iTXm3z+444NErpKI2lL tkLyl4vRX8cflwUGTagrEmWdRAq25FaK7L4UGHSUCrqLtJZOVzzsFD2q46nogO5u 3/9+89DKpki++eA63o4f5zOOcgq2PDT8H/cwRTnTH8UguBdxJkn8nZTQ8/WbsOnm UFlUVe+CbEto2bmW7er1Fgoib5PDfk9whj6PIzzxhQ9Mb8RndF1d5sxIJJgBAyC0 dzkVliI6LDiRKoJfgLV6sORvpfOehFrkibKCchcep4P35AB+XCbO5gbqdchcyTkh M9xBgzvVwN/q5ap1Cwcn+mNnN5ZNOKLslW/JAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUuYsLFr8JiYs6Gwtf1YNSMAaF8TUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC91WXNMRnI4SmlZczZHd3RmMVlO U01BYUY4VFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAGy ADANBgkqhkiG9w0BAQsFAAOCAQEARlt+4Z98eUaFr/7o78QdYwZnEXHJlpC4A0Y3 eW466KFHrzVWL8OUYPqIYD4RCKd7qSKKyJ6zXPMGflL8tVLfgFeVGnM7SdgZ1pAb +9YetVsvPmQW0uXkDmMCZGdnxiGV5i/sKVGymuVUs/Of8MKkfjGxP8AcBg6yNgKv swsFKl/uTZkCO9na4/Bb9WyBvhD/JJARvbUscConattslvB683xIE3EIJj5PNubu u8Iwn23PBPDs3XiTVr202Be/5S2yeMzAjWdEr8BKoBSRKY263yoweYUvWfSW//Vz bMwN8jxCVIdhI5xFJ1e+asHQjlzNniLoidSd72mBB7pjXupunQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org